The Boston-based company stresses that its platform carries out real attacks, not simulated ones, on its customers networks to assess risks and vulnerabilities.